木马技术探析  

Research on the Trojan Horse Technology

作　　者：陈洪昌[1] 

机构地区：[1]西安电子科技大学电子信息攻防对抗与仿真重点实验室,陕西西安710071

出　　处：《电子科技》2015年第4期154-157,共4页Electronic Science and Technology

摘　　要：互联网的开放性在给人们带来便利的同时,也加快了恶意代码的传播。黑客利用木马程序隐藏在用户计算机中,对受害用户进行信息窃取、破坏数据、监控用户行为等操作。文中介绍了计算机木马的原理、植入技术、隐藏技术。并通过研究目前最新的杀毒软件的查杀原理,实现了针对杀毒软件中特征码查杀以及主动防御技术的绕过,并在安装具备这两种功能的杀毒软件的Windows 7操作系统中成功免杀,可成功绕过杀毒软件的查杀。The openness of the Internet brings people both convenience and security problems. Malicious codes are spreading quickly. Hackers use Trojans hidden in the affected user＇s computer to steal information, destroy data, monitor user behavior and so on. This paper introduces the principles of the computer Trojan horse, the basic module, implant technology and hidden technology. By studying the latest antivirus software＇s killing principle, it realizes the bypassing of both the killing of featured codes in antivirus software and active defense technologies. It is killing exempt in installing the Windows 7 operating system which has antivirus software with the two functions and can successfully bypass the killing of antivirus software.

关 键 词：木马 主动防御 免杀技术 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]